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SCHLUESSELGERaBT 39 


I. Cipher Tochnioal Principles : 

Geract 39 is on eleotrioally-operated oiphcr-maohine. The 
cipher teohniquo Is derived from that of the Enigma; a direot 
ourrent passes through 3 (or A) wheels, with 26 positions, 

I II III a rcflector-whoel U, and then again through the 
3 wheels in reverse order, III II I. Unliko the Brgima, 
tho whocls ho re do not control thoir own raovoment: this is done 
through 3 independent pin-wheels N1 N2 N3 with periods 21, 23, 
25. X do not reaomber exactly how those figures were distributed 
among N1 N2 N3. It was either 


N1 N2 N3 or 

21 23 25 


HI N2 N3 
25 23 21 


U 


HL % 



NS NX rJi 


Tho pin wheels have a uniform motion; i.o, they move one 
position for every lotter l^eyod. As for tho movement of the key- 
wheels and other details, the machine passed through different 
stages of development in tho oourse of time, for which there 
were no specifio names and whioh will be denoted here by 
a,o,c,d. 

a) Each of the throe wheels moves on one plaoo whan there is on 
aotivo pin at tho sensing point of the relevant pin-wheel, and 
it only moves then. The wheols have no movable rings on tho 
body of the whoel, with tho result that - unlike the Enigma - 
the initial position cf the body of the wheel is determined 
absolutely, at the same time as the clear mss sago sotting. 

The reflcotor wheel is pluggable liko tho reflector wheel D 
on Enigma; it can be quiokly exohangod for a second rcfleotor 
wheel with prepared reflootor plugging. 

b) Wheels I, II, III, whoso wirings now correspond oxoctly 

to those of the Enlgna, hrvo adjustable rings; they can bo moved 
around tho body of tho wheels and hovo a fixed pin, which, by 
analogy with the Biigaa, is to bo called tho tum-uvor notch 
(although neohanioally it is not so made). Opr.oelto tho wheels 
I and II arc two sonsing points whioh pick up the turn-over notch 
as it posses. U is pluggable as in a) j in addition there is between 
the point of input and I a stacker S like the Enigma stoaker. 

The following two methods of working are possible: 

A) Working on own wiring: N1 N2 N3 are given a oertain 

pin arrangement, there being, it is true, certain limitations 
to the numbers of active pins. Vhcol I moves os under a). For wheel II 
there arc'the following 3 causes of movement: 
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1) An active pin at the sensing point of N2 onuses II 
to nova on one place, as in a). 

2) When thc‘ turn-over notch on the ring of I comes to 
the sensing point, II is caused to move on when the next letter 
is keyed (as with Enigma). 

3) When the turn-over notch on the ring of II cones to 
the sensing point of II, II turns on one plaoe when the next 
letter is keyed (at the same time as III, as with the 
"double step" on Enigma), 

If any of these three causes of movement take effect 
simultaneously on II, it nevertheless only moves on one 
place. There are three causes of movement for wheel III: 

1) An active pin at the sensing-point of N3 causes III to move 
on one place, as in a). 

2) When the turn-over notoh on the ring of II comes to 
the sensing point of II, III moves on one place when the 
next letter is keyed. 

Just as in the ease of II, if the two causes of movement 
for III operate simultaneously they combine to produce one 
stop, 

B) Working on Enigma wiring. All the pins of N1 are set 
at "active", the pins of N2 and 1-13‘ all remaining inaative. 

Then the wheel mo van out is identical with that of the Enigma. 

As all otherf actors also agree with the corresponding ones on 
the Enigma interchangeable working between both maahines is 
possible. 

o) A sensing-point is also provided opposite wheel III. If the 
turn-over notch or} the ring of III is touched by it, then I 
turns on one place when the next'letter is keyed. If this 
movement coincides with a step caused by hi this again results ■ 
in the single step. Thus the possibility of interchangeable 
working with the Enigma remains. In addition the machine new 
gets a fourth wheel, which is placed between III and U and does 
not move on when a key is touched. It corresponds to the fourth wheel 
on the Naval, Enigma and is used for interchangeable working with 
this machine. 

d) In the summer of 1944 told me that the 

reciprocal influencing of the wheels was to be altered in some way, 

I oannot remember details but nothing fundamental on the principle 
of the macnine described under c) was changed. Interchangeable 
working with arsry and naval Enigma remained possible. 
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XI Investigations into Periodicity 

Xn the cose of model a), the question of periodicity is 
elementary, there are 26^ = 676 pure periods of the length 

21 x 23 x 25 x 26 = 313, 950, 

as long £s the number of active pins on each of the pin wheels is 
prime to 2 and 13, This last condition snould be laid down 
in the cipher regulations; otherwise the 676 periods would bo 
further broken up in a mannor easily aeon 

Things are inuch more complicated in the case of Model b). 
Investigations into this problem in the winter 42/43 were only 
partly successful; above all it was not possible exaatly to 
calculate the lengths of the pure periods and the pre-periods. 
Estimates which were quite adequate for practioal purposes wore 
however given, I cannot remember the details of these somewhat 
extensive investigations. The extraordinary length of many 
pre-periods (lengths of some thousands were not uncommon) and the 
complication of their branahes -were remarkable, Tho general type 
can be illustrated by the follovdng diagram; 



In this the circle represents the pure period and the straight 
lines the pre-poriods. There were usually several pure periods, eaoh 
one of their having a complicated sys fccm of pre—periods branching into 
it. Several separate figures of the above type side by side are then 
neaessary to give a graphic representation of the periodicities. 

A lower limit for the lengths of tho pure periods was, as far as I 
remember, 26^ x 21 x 23 x 25 = 8, 162, 700 (?). 

The question of periodicities in the cose of model c) was 
still more Involved, It was just not possible to calculate 
the lengths of the pure periods and pre-periods, let alone give 
the lower limits which aro themselves hot inconsiderable. 



III. Cipher Security 

The principal weaknesses of the Enigma were as follows: 

1) Wheel I moved uniformly 

2) Wheel II and, above all, wheel III moved too 
infrequently. 

3) The period of 26 2 x 25 was comparatively small, 
so that-when there was a large amount of traffic 
on one day-on one key one had to reckon with the 
occurrence of critical depths (this applies at 
least to the Army Enigma; the naval machine had 

a fourth vaccl, so that a day's traffic on one key 
was spread out over 26 different periods). 

4) The reflector wheel was not pluggable and had remained 
unchanged for years (and the other wheels too); 
therefore (and because of (5)) the enemy could 
easily establish by Hollerith methods for example 

all of the 60 x 26i substitution alphabets of the 
unplugged machine. 

5) The number of possible wheel combinations was only 60, 
since the set of wheels belonging to the machine - 

at least in the oasc of the Amy Enigma - only 
consisted of 5 different wheels. 

Faults 1) - 4 ) hod already been eliminated on 
model a) of Schluesselgerae't 39, 5) then no longer 
appears vital. On the other hand, however, the 
giving up of the adjustable rings and of the stooker 
gave rise to weaknesses which the Enigma did not 
have. In fact the absence of the stecker S cannot 

be compensated for by making the reflector wheel U _. 

pluggable; investigations into Enigma had shown that 

it was considerably more difficult to find out the steclcering 

S than the wiring of the reflector wheel U. 

In detail, the results of the investigations were os 
follows: 

1) If the inner wiring and the clear message setting of 
wheels I, II, In are known, the varing of the reflector 
wheel and the pin arrangement of HI 112 N3 can bo 
found out from a orib of 25 letters; this was a fairly 
laborious process. 

2) If the inner wiring of wheels X, II, III and of the 
reflector wheel U is known, it is likewise possible to find out 

the clear message-setting and the pin-arrangement 

of N1. H2 N3 from a orib of 25 letters; this too is a 
laborious process. 


The above-mentioned weaknesses of model a) were 
eliminated by the introduction of steckering and adjustable 
rings on model b), although this hed been done priiinrily for 
quite a different reason, namely to make interchangeable working 
with Enigma possible. It was not now thought that there was any 
longer a serious possibility of a break—in. As however the 
system of I and N1 still had a relatively small period of 
21 x 26 it appeared desirable to destroy this too. This was 
done on model c) by making III react on I, and presented no 
technical difficulties. 

Finally in model c) the total number of periods was " 
multiplied by 26 compared with a) and b), by the introduction 
of,a fourth wheel; it was not, it is true, intended 
primarily for this purpose but was added to carry out 
interchangeable working with the Naval Enigma. 


IV. History of Geraet 39 

ii. del a) had been developed as early as the year '39 
or ’40 at Wa Pruef 7; a Baurat named A gHIT.T.TS ( ?) played a 
leading part, I remember; I did not knSrEEh personally. 

In the summer of 1 4-2 I saw an almost complete specimen at 
s (Pruef 7/lVj; it had been made by the firm of 
"Telefonbau una Normalzeit" at Fronkfurt-on-Main, A 
noteworthy feature was that when the clear-text letter was keyed 
the corresponding cipher letter could bo sent out 
simultaneously by the transmitter as a liorse character; this 
was naturally from the technical point of view, a fairly 
complicated operation. The machine thus was like a cipher 
teleprinter except that instead of the 5-clement alphabet the 
ordinary Morse alphabet wos used. The maximum keying speed 
was also the same as on a modern cipher teleprinter' it 
could not however be made use of when working on direct 
transmission, because reception at the other end was not 
automatic as in the case "of a cipher teleprinter, but 
had to be done aurally by the operator. That was one of the 
many reasons why the automatic transmission part of the 
machine was omitted in later models. This was done when 
Oberst KAHN, the head of the Pruef 7 department, left, he 
having especially advocated this strange principle. The 
second model actually constructed was like the model designated' 
with o) in section II; it only printed clear text and cipher 
text bn 2 separate stripB. I saw it in January 1944 when I 
was visiting Cberstleutnant FKCHTER (Pruef 7/m) at Planken. 

The change from cipher-technical principle a) to b) 
(undo)) was unde at the end of 1942; it was -ado- at the 
instigation eif the Navy who laid down the principle that any 
newly introduced cipher machine for higher H.Q's should permit 
interchangeable- working with the Enigma. The Army also 
adopted this standpoint: in the first instance only the highest 
authorities wore to be issued with the new machine, e.g. 

OKff, OKH, and tho Army Groups; and only gradually, as production 

permitted, was the Enigma laaohino to be replaced by 

the 39 at Amies, and finally perhaps at Amy Corps. There were 

during 1943 and 1944 between the various H.Q iginterestod 

many and lengthy discussions and arguments for and against the 

introduction of the 39 machine. Speoiol wishes of the Navy had to 

be taken into account. The industrial firm complained of lack 


of material and labour. Owing to these and similar difficulties, 
development stopped cl together at one time, but it was resumed 
however. At ony rate the vagueness of the decisive authorities vras, 
in addition to difficulties of production, the chief reason why 
the machine was never completed. . 


CM THE USE 0? HOLLERITH i jACHENES AMD Rptottct. 
CgjffBIi ATIJKl MACHINES IN BREAKING CIP HE R TEXTS EKCIPHEBED 
OK " 'i diALL iliGELIlj' 11 TYPE .laCHlKIS 


The breaking of cipher texte enciphered on "small 
Hagelin' type machines (036, Bc36 ? Converter 209) solely from 
the cipher text (v/ithoufc crib) is possible when, the pin 
arrangement of the pin l^ecls can be discovered from column 
statistics of the cipher text. The calculation involved can-be 
formulated as follows: 

f ^C — 12 26) 

}( ’= 1 * 2 *” ),^ 

w whole number0. Find the (§) quantities 

a KjJ X “ 2 ' 3 —*“» (* ^ 


The calculation is carried out with a Hollerith machine (large 
accounting liiaohine ?) provided with special wiring. As mistakes 
were frequent and. the time required was considerable, the construction of 
special calculating machines for this purpose ■v/as proposed; X. 
know nothing about their construction, Neither do I know 
whether development was even seriously taken in hand. 

In addition a special calculating apparatus for finding out the 
numerical value of n linear forms (n £ 26) 

*K, \X X X ! (X “ 1>2,...,n). ' 

&uoh numerical calculations occur in calculating the theoretical 
Cipher distribution from the on olair distribution and the 
theoretioal kick probabilities. All numbers b K i and A which 
occur are not negative, and the matrix (blQ,) is cyclic: this 
permits some simplification in the construction of the apparatus. 
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